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C» AMENDMENTS TO THE CLAIMS 



(Original) A method of managing customer security features 
by a security server, said method comprising; 
receiving a request from a requestor; 
authenticating the requestor; and 

manipulating one or more security feature^ stored in a data 
area corresponding to a customer in response to the 
. request* 



PATENT 



(Original) The method as described in cl 
least one of the security features is se 
group consisting of a photograph of the 
customer signature, a digital signature 
the customer,, a fingerprint r and a descr 
customer. 



aim 1 wherein at 

from the 
customer, a 

spending to 
ion of the 



lected 



correi 



ipt 



(Original) The method as described in claim 1 further 
comprising: 

receiving one or more new security features from the 
customer; 

assigning an item identifier to each of tl|e new security 

features? and 
storing the new security features in the 4ata area 

corresponding to the customer, 

(Original) The method as described in claim 1 further 
comprising: 

receiving an authorization from a customer 

authorization including a first merchant 
storing the authorization; 
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6- 



jtome r 



alicat 



receiving a retrieval request from a merct 
retrieval request including a cus 
corresponding to the customer and a 
identifier corresponding to the mercl" 

validating the merchant request, the v 
retrieving the authorization; and 
comparing the first merchant identif 
merchant identifier ; and 

returning one or more security features 

the customer in response to the first, 
identifier matching the second me 



4er to the second 

corresponding to 
merchant 

identifier. 



(Original) The method as described in 
comprising j 
receiving an authorization from a customer 

authorization including a public key 

the merchant; 
storing the authorization and the merchant 
receiving an encrypted retrieval request 

the encrypted retrieval request 

private key corresponding to the 

key; 

deciphering the encrypted retrieval re 

stored public key; and 
returning one or more security features 

the customer in response to the dec 



rche.nt 



claim 1 further 



(Original) The method as described in clai|m 1 further 
comprising: 

receiving an edit request from a customer, 

including a customer identifier and 0ne 
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ant, the 

identifier 
econd merchant 
ant; 

ing including: 



, the 

corresponding to 



' s public key; 
ifrom a merchant, 
using a 
9 s public 



encrypted 
merchant 



quest using the 



corresponding to 
inhering. 



the edit request 
or more 
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8. 



9. 



PATENT 

I 

updated security features, the security features each 

including an security item identifier ; 
locating a stored security feature corresponding to each of 

the security' item identifiers; and 
replacing the stored security features with the updated 

security features. 

(Original) The method as described in claim 6 further 
comprising: 

verifying the customer, the verifying including: 

receiving a secret customer identifier from the 

customer; and 
comparing the secret customer identif 

secret customer identifier corres 

customer. 



:laim 



(Original) The method as described in c 
request includes an encrypted packet that 
using a private key corresponding to the 
method further comprising: 
locating a stored public key correspondi 

requestor; and 
deciphering the encrypted packet using th^ 
key, the deciphering verifying the 
requestor , wherein the manipulating 
response to the encrypted packet beii|ig 
deciphered. 



1 wherein the 
is encrypted 
Requestor, the 



ng to the 



ide 



(Original) An information handling system 

one or more processors; 

a memory accessible by the processors; 



ier with a stored 
sponding to the 



stored public 
ntity of the 
s performed in 
successfully 



comprising: 
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10. 



11. 



man a ge 
f eati: re 



customer 
management 



a network interface for communicating with 

information handling systems; 
one or more nonvolatile storage areas accessible by the 

processors; and 
a security feature management tool to 

security features f the security 

tool including: 

means for receiving a request from a 
means for authenticating the requester 
means for manipulating one or more 

stored in a data area corresponc 

in response to the request. 



secur 



(Original) The information handling system 
claim 9 wherein the request includes an 
that is encrypted using a private key 
requestor, the information handling system 
comprising: 

means for locating a stored public key 
requestor; and 

means for deciphering the encrypted packet 
public key, the deciphering verifying 
the requestor, wherein the manipul 
in response to the encrypted packet 
deciphered. 



er crypt 



correspo 



(Original) The information handling system 
claim 9 further comprising: 
means for receiving an authori2ation from 

authorization including a first 
means for storing the authorization; 



merchant 
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other 



requestor ; 



ity features 
ing to a customer 



as described in 
ed packet 
nding to the 
further 



corresponding to the 

using the stored 
the identity of 
atilng is performed 
being successfully 



as described in 

a customer, the 
identifier ; 
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13. 



from 



cus tome 



s ec 



means for receiving a retrieval request 
the retrieval request including a 
corresponding to the customer and a 
identifier corresponding to the merchant; 

means for validating the merchant request, 
including: 

retrieving the authorization; and 
comparing the first merchant identi 
merchant identifier? and 
means for returning one or more security 
corresponding to the customer in re 
. merchant identifier matching the 
identifier. 



the validating 



fier to the second 



second 



features 

se to the first 
merchant 



spons 



12 . (Original) The information handling systeir} as described in 
claim 9 further comprising: 

means for receiving one or more new securifty features from 

the customer? 
means for assigning an item identifier to 

security features; and 
means for storing the new security features in the data 
area corresponding to the customer. 



stor ed 



(Original) A computer program product 
operable medium for managing customer s 
a security server, said computer program 
comprising: 

means for receiving a request from a 
means for authenticating the requestor; 
means for manipulating one or more secur 

in a data area corresponding to a cus 

to the request. 



reque stor 



ar d 



itjy 
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a merchant, 
r identifier 
ond merchant 



each of the new 



ecu .rity 



product 



on a computer 
features by 



features stored 
tomer in response 
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14- 



15, 



16. 



(Original) The computer program product as 
claim 13 wherein at least one of the secu 
selected from the group consisting of a 
customer, a customer signature , a digital 
corresponding to the customer , a 
description of the customer. 



fingerprint 



PATENT 

described in ' 
r[ity features is 
photograph of the 
signature 
and a 



(Original) The computer program product as 
claim 13 further comprising; 

means for receiving one or more new security features from 

the customer; 
means for assigning an item identifier, to 

security features ; and 
means for storing the new security features in the data 

area corresponding to the customer, 



merchant 



(Original) The computer program product as 

claim 13 further comprising: 

means for receiving an authorization from 
authorization including a first 

means for storing the authorization; 

means for receiving a retrieval request 

the retrieval' request including a cu 
corresponding to the customer and a 
identifier corresponding to the 

means for validating the merchant request t 
including: 

retrieving the authorization; and 
comparing the first merchant identif:. 
merchant identifier; and 
means for returning one or more security 
corresponding to the customer in 



merchant 
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described in 



each of the new 



described in 

a customer, the 
identifier ; 



firom a merchant , 
tomer identifier 
econd merchant 



the validating 

er to the second 

features 

e to the first 



respons 



Atty Ret No.IBM-1015 



PACE 11/25 * RCVD AT 1/12/2005 12:40:07 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-1/0 * DNIS:8729306 * CSID:51 2301 6742 * DURATION (mm-ss): 09-30 



Jan 12 2005 11:47AM none 



5123016742 



17, 



18, 



merchant identifier matching the secqnd merchant 
identifier ♦ 



(Original) The computer program product as 

claim 13 further comprising: 

means for receiving an authorization from 

authorization including a public key 

the merchant; 
means for storing the authorization and tt. 

public key; 
means for receiving an encrypted retrieva 

merchant, the encrypted retrieval 

using a private key corresponding to 

public key; 
means for deciphering the encrypted re 

the stored public key; and 
means for returning one or more security 

corresponding to the customer in 

deciphering . 



recue 



identi 



the 



(Original) The computer program product as; 

claim 13 further comprising: 

means for receiving an edit request from 
edit request including a customer i 
or more updated security features, 
features each including an security 

means for locating a stored security 

to each of the security item identif 

means for replacing the stored security 
updated security features . 



feature 
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described in 

a customer, the 
corresponding to 

e merchant' s 



request from a 
st encrypted 
the merchant's 



trieval request using 

features 
response to the 



described in 



customer, the 
fier and one 
security 
4tem identifier; 

corresponding 
:j_ers ? and 

s with the 



features 
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19, 



PATENT 

(Original) The computer program product as| described in 
claim 18 further comprising 

means for verifying the customer, the verifying including: 
means for receiving a secret customer 

the customer; and 
means for comparing the secret customer identifier 
with a stored secret customer iqentifier 
corresponding to the customer 



p. 13 



identifier from 



20, 



corre 



cor re 



(Original) The computer program product as 
claim 13 wherein the request includes an 
that is encrypted using a private key 
requestor, the computer program product 
means for locating a stored public key 

requestor ; and 
means for deciphering the encrypted packet 
public key, the deciphering verifyin 
the requestor , wherein the 
in response to the encrypted packet 
deciphered. 



described in 
ncrypted packet 
sponding to the 
farther comprising: 
sponding to the 



manipulating 



using the stored 
g the identity of 
is performed 
being successfully 
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